Geeks To Go is a helpful hub, where thousands of volunteer geeks quickly serve friendly answers and support. Check out the forums and get free advice from the experts. Register now to gain access to all of our features, it's FREE and only takes one minute. Once registered and logged in, you will be able to create topics, post replies to existing threads, give reputation to your fellow members, get your own private messenger, post status updates, manage your profile and so much more.

Trojan.Vundo - ddabx.dll [RESOLVED]

ComputerChallenged

Posted 09 October 2005 - 07:21 PM

ComputerChallenged

New Member

Member

3 posts

My Norton Anti-Virus tells me I have a Trojan.Vundo in file ddabx.dll and that access to the file was denied. I have run virus scans in regular and safe mode and even tried manually removing the file but I always get access denied / file in use by another program. I followed the first instructions for this forum and ran my Ad-Aware and SpyBot as well as install and run Ewido Security Suite and Trojan Hunter but no luck. Here is my Hijack This log:

Advertisements

greyknight17

Posted 09 October 2005 - 07:25 PM

greyknight17

Malware Expert

Visiting Consultant

16,560 posts

Welcome to GTG.

Please print out or copy this page to Notepad. Make sure to work through the fixes in the exact order it is mentioned below. If there's anything that you don't understand, ask your question(s) before proceeding with the fixes. You should 'not' have any open browsers when you are following the procedures below.

* Double-click VundoFix.exe to extract the files.* After the files are extracted, please reboot your computer into Safe Mode. You can do this by restarting your computer and continually tapping the F8 key (or F5 in some machines) until a menu appears. Use your up arrow key to highlight Safe Mode then hit enter.* Once in safe mode open the VundoFix folder and doubleclick on KillVundo.bat* Please type the following file path (make sure to enter it exactly as below!):

C:\WINNT\system32\ddabx.dll

* Press Enter, then press the F6 key, then press Enter one more time to continue with the fix.* When asked for a second path, enter -> C:\WINNT\system32\xbadd.** Press Enter, then press the F6 key, then press Enter one more time to continue with the fix.* The fix will run then HijackThis will open.* In HijackThis, please place a check next to the following items and click FIX CHECKED:

* After you have fixed these items, close Hijackthis and Press any key to Force a reboot of your computer.* Pressing any key will cause a 'Blue Screen of Death' this is normal, do not worry!* Once your machine reboots please continue with the instructions below.

Open Cleanup! by double-clicking the icon on your desktop (or from the Start > All Programs menu).Set the program up as follows:Click 'Options...'Move the arrow down to 'Custom CleanUp!'Put a check next to the following (Make sure nothing else is checked!):

ComputerChallenged

Posted 10 October 2005 - 03:35 PM

ComputerChallenged

New Member

Topic Starter

Member

3 posts

Thank you very much for the help. So far everything appears to be working fine but I haven't used it much yet. I will definitely be adding more programs as you recommended so I don't end up with this again.